📦

bonsai

Vendor: mozilla

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 2 Code Available
Total RCEs 1 Remote Access
Total CVEs 8 Total Indexed
Avg. EPSS 3.60% Exploit Prob.
Latest CVE CVE-2003-0152 Apr 02

Security Vulnerability Index

Page 1 / 1
7.5 CVSS
CVE-2003-0152
RCE

Unknown vulnerability in bonsai Mozilla CVS query tool allows remote attackers to execute arbitrary commands as the www-data user.

EPSS: 2.37%
5.0 CVSS
CVE-2003-0153
Exploit Found

bonsai Mozilla CVS query tool leaks the absolute pathname of the tool in certain error messages generated by (1) cvslog.cgi, (2) cvsview2.cgi, or (3) multidiff.cgi.

EPSS: 5.67%
6.8 CVSS
CVE-2003-0154
Exploit Found

Cross-site scripting vulnerabilities (XSS) in bonsai Mozilla CVS query tool allow remote attackers to execute arbitrary web script via (1) the file, root, or rev parameters to cvslog.cgi, (2) the file or root parameters to cvsblame.cgi, (3) various parameters to cvsquery.cgi, (4) the person parameter to showcheckins.cgi, (5) the module parameter to cvsqueryform.cgi, and (6) possibly other attack vectors as identified by Mozilla bug #146244.

EPSS: 4.59%
5.0 CVSS
CVE-2003-0155

bonsai Mozilla CVS query tool allows remote attackers to gain access to the parameters page without authentication.

EPSS: 1.77%